{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.07776584476232529, "class": 0 } ], "prob": 0.077765845, "class": 0, "models": [ { "m": "az", "prob": 0.077765845, "class": 0 }, { "m": "az/scripts", "prob": 0.005633619, "class": 0 }, { "m": "az/php", "prob": 0.000069555725, "class": 0 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-08T21:42:13Z" }, "path": "nl.php", "raw": { "v": "4", "fs": [ { "f": "O₃(CCaCo)H(Db)Md", "k": { "source.strings[0]": "\u003cb\u003eDrag and drop of klik hier\u003c/b\u003e om je afbeelding te uploaden (maximaal 5 MB)", "source.strings[1]": "Aankoopbeveiliging is nu", "source.strings[2]": "Activiteit", "source.strings[3]": "Adresregel", "source.strings[4]": "Alle rechten voorbehouden.", "source.strings[5]": "Beveilig mijn Account", "source.strings[6]": "Beveiliging", "source.strings[7]": "Bevestig uw adres", "source.strings[8]": "Bevestig uw kaart", "source.strings[9]": "CVV (3 cijfers)", "source.strings[10]": "Contact Us", "source.strings[11]": "Controleer je invoer en probeer het opnieuw.", "source.strings[12]": "Dien beide zijden van een dubbelzijdig document in", "source.strings[13]": "Doorgaan", "source.strings[14]": "Draag geen hoed of bril\u003cbr\u003e en zorg ervoor dat je baard is bijgesneden", "source.strings[15]": "E-mailadres", "source.strings[16]": "E-mailadres is vereist.", "source.strings[17]": "GA TERUG", "source.strings[18]": "GEACTIVEERD", "source.strings[19]": "Geboortedatum (DD/MM/YYYY)", "source.strings[20]": "Heeft u problemen met inloggen?", "source.strings[21]": "Het dekt alle in aanmerking komende aankopen waarbij een account wordt gebruikt, evenals betalingen via onze website. Om in te spelen op Aankoopbescherming, eisen we onder meer dat accounts een goede reputatie behouden en vragen dat een geschil binnen 180 dagen na uw aankoop of betaling wordt ingediend.", "source.strings[22]": "Identiteitsbewijs", "source.strings[23]": "Inloggen", "source.strings[24]": "Kaartnummer", "source.strings[25]": "Kaarttype", "source.strings[26]": "Kies uw ID-type", "source.strings[27]": "Lees de vereisten voor aankoopbescherming", "source.strings[28]": "Log in op uw rekening", "source.strings[29]": "Maak foto's van hoge kwaliteit of maak\u003cbr\u003e een scan van hoge kwaliteit", "source.strings[30]": "Mijn rekening", "source.strings[31]": "Nationaal ID", "source.strings[32]": "Ongebruikelijke activiteit", "source.strings[33]": "Opslaan", "source.strings[34]": "Overzicht", "source.strings[35]": "Paspoort", "source.strings[36]": "Portemonnee", "source.strings[37]": "Postcode", "source.strings[38]": "Privacy", "source.strings[39]": "Proces voltooid", "source.strings[40]": "Rekening openen", "source.strings[41]": "Rijbewijs", "source.strings[42]": "Scan beide pagina's \u003cbr\u003e als u een paspoort kiest", "source.strings[43]": "Selfie met bewijs", "source.strings[44]": "Stad / Dorp", "source.strings[45]": "Telefoon type", "source.strings[46]": "Telefoonnummer", "source.strings[47]": "Uitloggen", "source.strings[48]": "Upload een selfie met", "source.strings[49]": "Upload uw", "source.strings[50]": "Upload uw identiteit", "source.strings[51]": "Uw vingers bedekken de foto\u003cbr\u003eof belangrijke informatie niet", "source.strings[52]": "Validatieproces voltooid", "source.strings[53]": "Verbergen", "source.strings[54]": "Vervaldatum MM/JJ", "source.strings[55]": "Verwerken...", "source.strings[56]": "Verzenden \u0026 aanvragen", "source.strings[57]": "Voer een geldig e-mailadres in.", "source.strings[58]": "Voer uw wachtwoord in", "source.strings[59]": "Volgende", "source.strings[60]": "Voor-en achternaam", "source.strings[61]": "We hebben een aantal ongebruikelijke activiteit opgemerkt", "source.strings[62]": "We hebben uw hulp nodig bij het beveiligen van uw account om ongeoorloofde toegang te voorkomen. Voor uw veiligheid kunnen er enkele beperkingen zijn in uw account als de informatie niet correct is", "source.strings[63]": "Weergeven", "source.strings[64]": "Wereldwijd", "source.strings[65]": "Wettelijk", "source.strings[66]": "Wijzigen", "source.strings[67]": "Zorg ervoor dat je rechtuit\u003cbr\u003e kijkt naar de camera", "source.strings[68]": "activity", "source.strings[69]": "address", "source.strings[70]": "bt_back", "source.strings[71]": "bt_login", "source.strings[72]": "bt_next", "source.strings[73]": "bt_proceed", "source.strings[74]": "bt_save", "source.strings[75]": "bt_secure", "source.strings[76]": "bt_signup", "source.strings[77]": "changer", "source.strings[78]": "choose", "source.strings[79]": "cnumber", "source.strings[80]": "contact", "source.strings[81]": "drop_zone", "source.strings[82]": "eml_msg1", "source.strings[83]": "eml_msg2", "source.strings[84]": "eml_placeholder", "source.strings[85]": "footer", "source.strings[86]": "head_slf", "source.strings[87]": "head_up", "source.strings[88]": "logout", "source.strings[89]": "pnumber", "source.strings[90]": "privacy", "source.strings[91]": "pwd_hide", "source.strings[92]": "pwd_placeholder", "source.strings[93]": "pwd_show", "source.strings[94]": "rights", "source.strings[95]": "rotate", "source.strings[96]": "security", "source.strings[97]": "send_receive", "source.strings[98]": "trouble", "source.strings[99]": "wallet" }, "x": 1, "id": 0, "ms": { "file": { "size": 3537.0 }, "text": { "tab_count": 207.0, "digit_ratio": 0.01, "space_count": 384.0, "total_lines": 104.0, "char_entropy": 4.93, "unique_chars": 76.0, "lines_over_200": 2.0, "string_density": 2.9, "avg_line_length": 32.03, "max_line_length": 317.0, "empty_line_ratio": 0.06, "last_line_length": 2.0, "most_common_char": "e", "whitespace_ratio": 0.23, "most_common_ratio": 0.09, "identifier_density": 0.05, "line_length_stddev": 38.8, "normalized_string_count": 29.61, "suspicious_string_ratio": 0.01, "max_inline_whitespace_run": 1.0, "normalized_unique_identifiers": 0.75 }, "strings": { "total": 302.0, "avg_length": 15.5, "max_length": 304.0, "avg_entropy": 2.67, "sql_strings": 2.0, "total_bytes": 4682.0, "entropy_stddev": 0.78 }, "comments": {}, "functions": {}, "identifiers": { "total": 5.0, "avg_length": 8.4, "max_length": 11.0, "min_length": 5.0, "avg_entropy": 2.8, "reuse_ratio": 1.0, "unique_count": 5.0, "length_stddev": 2.15, "all_lowercase_ratio": 1.0 } }, "ss": [ [ 26, "title" ], [ 27, "title" ], [ 37, "Log in op uw rekening" ], [ 38, "Log in op uw rekening" ], [ 65, "alert" ], [ 66, "alert" ], [ 76, "Controleer je invoer en probeer het opnieuw." ], [ 77, "Controleer je invoer en probeer het opnieuw." ], [ 127, "changer" ], [ 128, "changer" ], [ 140, "Wijzigen" ], [ 141, "Wijzigen" ], [ 155, "eml_placeholder" ], [ 156, "eml_placeholder" ], [ 176, "E-mailadres" ], [ 177, "E-mailadres" ], [ 194, "eml_msg1" ], [ 195, "eml_msg1" ], [ 208, "E-mailadres is vereist." ], [ 209, "E-mailadres is vereist." ], [ 238, "eml_msg2" ], [ 239, "eml_msg2" ], [ 252, "Voer een geldig e-mailadres in." ], [ 253, "Voer een geldig e-mailadres in." ], [ 290, "bt_next" ], [ 291, "bt_next" ], [ 303, "Volgende" ], [ 304, "Volgende" ], [ 318, "pwd_placeholder" ], [ 319, "pwd_placeholder" ], [ 339, "Voer uw wachtwoord in" ], [ 340, "Voer uw wachtwoord in" ], [ 367, "pwd_show" ], [ 368, "pwd_show" ], [ 381, "Weergeven" ], [ 382, "Weergeven" ], [ 397, "pwd_hide" ], [ 398, "pwd_hide" ], [ 411, "Verbergen" ], [ 412, "Verbergen" ], [ 427, "bt_login" ], [ 428, "bt_login" ], [ 441, "Inloggen" ], [ 442, "Inloggen" ], [ 456, "trouble" ], [ 457, "trouble" ], [ 469, "Heeft u problemen met inloggen?" ], [ 470, "Heeft u problemen met inloggen?" ], [ 507, "or" ], [ 508, "or" ], [ 515, "of" ], [ 516, "of" ], [ 524, "bt_signup" ], [ 525, "bt_signup" ], [ 539, "Rekening openen" ], [ 540, "Rekening openen" ], [ 561, "footer" ], [ 562, "footer" ], [ 579, "contact" ], [ 580, "contact" ], [ 592, "Contact Us" ], [ 593, "Contact Us" ], [ 610, "privacy" ], [ 611, "privacy" ], [ 623, "Privacy" ], [ 624, "Privacy" ], [ 638, "legal" ], [ 639, "legal" ], [ 649, "Wettelijk" ], [ 650, "Wettelijk" ], [ 666, "world" ], [ 667, "world" ], [ 677, "Wereldwijd" ], [ 678, "Wereldwijd" ], [ 699, "rotate" ], [ 700, "rotate" ], [ 711, "Verwerken..." ], [ 712, "Verwerken..." ], [ 755, "title" ], [ 756, "title" ], [ 766, "Ongebruikelijke activiteit" ], [ 767, "Ongebruikelijke activiteit" ], [ 799, "head" ], [ 800, "head" ], [ 809, "We hebben een aantal ongebruikelijke activiteit opgemerkt" ], [ 810, "We hebben een aantal ongebruikelijke activiteit opgemerkt" ], [ 873, "body" ], [ 874, "body" ], [ 883, "We hebben uw hulp nodig bij het beveiligen van uw account om ongeoorloofde toegang te voorkomen. Voor uw veiligheid kunnen er en" ], [ 884, "We hebben uw hulp nodig bij het beveiligen van uw account om ongeoorloofde toegang te voorkomen. Voor uw veiligheid kunnen er en" ], [ 1087, "bt_secure" ], [ 1088, "bt_secure" ], [ 1102, "Beveilig mijn Account" ], [ 1103, "Beveilig mijn Account" ], [ 1154, "title" ], [ 1155, "title" ], [ 1165, "Mijn rekening" ], [ 1166, "Mijn rekening" ], [ 1185, "logout" ], [ 1186, "logout" ], [ 1197, "Uitloggen" ], [ 1198, "Uitloggen" ], [ 1213, "menu" ], [ 1214, "menu" ], [ 1229, "home" ], [ 1230, "home" ], [ 1239, "Overzicht" ], [ 1240, "Overzicht" ], [ 1256, "activity" ], [ 1257, "activity" ], [ 1270, "Activiteit" ], [ 1271, "Activiteit" ], [ 1288, "send_receive" ], [ 1289, "send_receive" ], [ 1306, "Verzenden \u0026 aanvragen" ], [ 1307, "Verzenden \u0026 aanvragen" ], [ 1335, "wallet" ], [ 1336, "wallet" ], [ 1347, "Portemonnee" ], [ 1348, "Portemonnee" ], [ 1366, "help" ], [ 1367, "help" ], [ 1376, "Hulp" ], [ 1377, "Hulp" ], [ 1388, "open" ], [ 1389, "open" ], [ 1398, "Menu" ], [ 1399, "Menu" ], [ 1410, "close" ], [ 1411, "close" ], [ 1421, "Dicht" ], [ 1422, "Dicht" ], [ 1438, "head1" ], [ 1439, "head1" ], [ 1449, "Bevestig uw kaart" ], [ 1450, "Bevestig uw kaart" ], [ 1473, "head2" ], [ 1474, "head2" ], [ 1484, "Bevestig uw adres" ], [ 1485, "Bevestig uw adres" ], [ 1508, "ctype" ], [ 1509, "ctype" ], [ 1519, "Kaarttype" ], [ 1520, "Kaarttype" ], [ 1535, "cnumber" ], [ 1536, "cnumber" ], [ 1548, "Kaartnummer" ], [ 1549, "Kaartnummer" ], [ 1566, "exp" ], [ 1567, "exp" ], [ 1575, "Vervaldatum MM/JJ" ], [ 1576, "Vervaldatum MM/JJ" ], [ 1599, "csc" ], [ 1600, "csc" ], [ 1608, "CVV (3 cijfers)" ], [ 1609, "CVV (3 cijfers)" ], [ 1630, "name" ], [ 1631, "name" ], [ 1640, "Voor-en achternaam" ], [ 1641, "Voor-en achternaam" ], [ 1665, "dob" ], [ 1666, "dob" ], [ 1674, "Geboortedatum (DD/MM/YYYY)" ], [ 1675, "Geboortedatum (DD/MM/YYYY)" ], [ 1707, "address" ], [ 1708, "address" ], [ 1720, "Adresregel" ], [ 1721, "Adresregel" ], [ 1737, "city" ], [ 1738, "city" ], [ 1747, "Stad / Dorp" ], [ 1748, "Stad / Dorp" ], [ 1765, "zip" ], [ 1766, "zip" ], [ 1774, "Postcode" ], [ 1775, "Postcode" ], [ 1789, "ptype" ], [ 1790, "ptype" ], [ 1800, "Telefoon type" ], [ 1801, "Telefoon type" ], [ 1820, "pnumber" ], [ 1821, "pnumber" ], [ 1833, "Telefoonnummer" ], [ 1834, "Telefoonnummer" ], [ 1854, "bt_save" ], [ 1855, "bt_save" ], [ 1867, "Opslaan" ], [ 1868, "Opslaan" ], [ 1881, "footer" ], [ 1882, "footer" ], [ 1899, "security" ], [ 1900, "security" ], [ 1913, "Beveiliging" ], [ 1914, "Beveiliging" ], [ 1932, "rights" ], [ 1933, "rights" ], [ 1944, "Alle rechten voorbehouden." ], [ 1945, "Alle rechten voorbehouden." ], [ 2001, "head" ], [ 2002, "head" ], [ 2011, "Upload uw identiteit" ], [ 2012, "Upload uw identiteit" ], [ 2038, "proof" ], [ 2039, "proof" ], [ 2055, "one" ], [ 2056, "one" ], [ 2064, "Identiteitsbewijs" ], [ 2065, "Identiteitsbewijs" ], [ 2089, "two" ], [ 2090, "two" ], [ 2098, "Selfie met bewijs" ], [ 2099, "Selfie met bewijs" ], [ 2123, "three" ], [ 2124, "three" ], [ 2134, "Proces voltooid" ], [ 2135, "Proces voltooid" ], [ 2161, "choose" ], [ 2162, "choose" ], [ 2173, "Kies uw ID-type" ], [ 2174, "Kies uw ID-type" ], [ 2195, "type" ], [ 2196, "type" ], [ 2211, "one" ], [ 2212, "one" ], [ 2220, "Paspoort" ], [ 2221, "Paspoort" ], [ 2236, "two" ], [ 2237, "two" ], [ 2245, "Nationaal ID" ], [ 2246, "Nationaal ID" ], [ 2265, "three" ], [ 2266, "three" ], [ 2276, "Rijbewijs" ], [ 2277, "Rijbewijs" ], [ 2297, "bt_proceed" ], [ 2298, "bt_proceed" ], [ 2313, "Doorgaan" ], [ 2314, "Doorgaan" ], [ 2328, "head_up" ], [ 2329, "head_up" ], [ 2341, "Upload uw" ], [ 2342, "Upload uw" ], [ 2357, "rule1" ], [ 2358, "rule1" ], [ 2374, "one" ], [ 2375, "one" ], [ 2383, "Maak foto's van hoge kwaliteit of maak\u003cbr\u003e een scan van hoge kwaliteit" ], [ 2384, "Maak foto's van hoge kwaliteit of maak\u003cbr\u003e een scan van hoge kwaliteit" ], [ 2461, "two" ], [ 2462, "two" ], [ 2470, "Dien beide zijden van een dubbelzijdig document in" ], [ 2471, "Dien beide zijden van een dubbelzijdig document in" ], [ 2528, "three" ], [ 2529, "three" ], [ 2539, "Scan beide pagina's \u003cbr\u003e als u een paspoort kiest" ], [ 2540, "Scan beide pagina's \u003cbr\u003e als u een paspoort kiest" ] ], "sz": 3537, "ts": [ { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "Upload een selfie met", "Upload uw identiteit", "\u003cb\u003eDrag and drop of klik hier\u003c/b\u003e om je afbeelding te uploaden (maximaal 5 MB)", "Upload uw" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action--rx-11", "l": 1 }, { "c": 0.4000000059604645, "d": "Wallet keyword", "e": [ "wallet" ], "i": "micro-behaviors/data/text/crypto::wallet-token", "l": 1 }, { "c": 0.30000001192092896, "d": "HTTP configuration field (body)", "e": [ "\"body\"" ], "i": "micro-behaviors/communications/http/request/client::http-config-body", "l": 2 }, { "a": "T1505.003", "d": "PHP open tag", "e": [ "\u003c?php" ], "i": "objectives/command-and-control/backdoor/webshell/request::php-tag", "l": 1, "m": "B0030" }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 104.00" ], "i": "metadata/file/text/metrics::file-has-30-plus-lines", "l": 1 }, { "c": 0.8399999737739563, "d": "Regex component marker", "e": [ "Beveilig mijn Account", "We hebben uw hulp nodig bij het beveiligen van uw account om ongeoorloofde toegang te voorkomen. Voor uw veiligheid kunnen er en", "Het dekt alle in aanmerking komende aankopen waarbij een account wordt gebruikt, evenals betalingen via onze website. Om in te s" ], "i": "micro-behaviors/data/text/llm/action::llm-send-action-cond-4--inline-11753", "l": 1 }, { "a": "T1005", "c": 0.9200000166893005, "d": "Regex component marker", "e": [ "wallet" ], "i": "objectives/collection/stealer/tactics::office-secret-extension-list--rx-2", "l": 1, "m": "B0028" }, { "a": "T1005", "c": 0.699999988079071, "d": "CVV/CVC field reference", "e": [ "CVV" ], "i": "objectives/credential-access/financial/credit-card::cvv-field", "l": 1, "m": "B0030" } ], "sha": "08f7d14ec4f8d8bf0fa2e6ba74a9b6b06c7175555e5578d96346636b5cf3319c", "path": "/data/samples/bad/datasets/awesome-malware/PHP/nl.php", "type": "php" } ], "tv": "bef72" } }